My previous bio:
From #northshore Massachusetts relocated to northeastern #Vermont and not just an aggregation of hashtags but: #antifascismIsProper #vegetarian #UBI #punk #punchanazi #antitrust #records #NEK #climate #spiritualjazz #decolonization #movies #SCOTUSexpansion #atheist #rescue #dogs #art #antifascism #photography #audio #privacy #bread #puppets #p2p #security #transparency #accountability #intersectionalism #sober #farmSanctuary #resistZionism
I tend to mute or remove followers with neither posts nor bio, and those containing financial-support or revenue-promotion links
security
#Trump & other top leaders of the #US were evacuated from the annual #WhiteHouseCorrespondentsDinner on Saturday night after an unspecified threat. There did not immediately appear to be any injuries.
The #SecretService & other authorities swarmed the banquet hall as guests ducked under tables by the hundreds. “Out of the way, sir!” someone yelled. Others yelled to duck.
#WHCA #WHCD #security #law
https://apnews.com/article/white-house-correspondents-dinner-trump-first-amendment-a0a2446832e8596e66c6fccb8426c8aa
Edited 199d ago
When the compiler lies: breaking memory safety in safe Go https://lobste.rs/s/214wj4 #go #security
https://ciolek.dev/posts/when-the-compiler-lies
Revocation of X.509 certificates https://lobste.rs/s/spm1cr #security
https://blog.apnic.net/2026/04/24/revocation-of-x-509-certificates/
Security Advisory: Local privilege escalation in Lix and Nix https://lobste.rs/s/g0crsm #nix #security
https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407
1000 third parties could have stolen RIPE NCC session tokens - by design via @fanf https://lobste.rs/s/t9esuf #security
https://mxsasha.eu/posts/ripe-ncc-sso-cookie-exposure/
Behind the Scenes Hardening Firefox with Claude Mythos Preview https://lobste.rs/s/7zppv1 #browsers #security
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
Npm Slop & Wonky Software Supply Chains https://lobste.rs/s/hllfeo #javascript #nodejs #security
https://simonramstedt.com/blog/2026-04-09-npm-slop-and-wonky-software-supply-chains/
CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module https://lobste.rs/s/pbvqlz #security
https://www.cve.org/CVERecord?id=CVE-2026-42530
Podman rootless containers and the Copy Fail exploit by @ggpsv https://lobste.rs/s/pdckk8 #linux #security
https://garrido.io/notes/podman-rootless-containers-copy-fail/
I Left Port 22 Open on the Internet for 54 Days. Here's Who Showed Up https://lobste.rs/s/cpu221 #networking #security
https://arman-bd.hashnode.dev/i-left-port-22-open-on-the-internet-for-54-days-here-s-who-showed-up
The Internet needs an antibotty immune system, stat by @avsm https://lobste.rs/s/tbd39w #security
https://anil.recoil.org/notes/internet-immune-system
This one might be interesting to anyone interested in computer gaming history.
I spent the last couple of weeks finally finishing a project I started for Bletchley Park about 20 years ago. Recreating the original MUD and MIST on a mirror of the original Essex University system that finally closed in 1991.
Roy Trubshaw and Richard Bartle wrote the first online multi-user game (MUD) on Essex University's DECSystem-10 in 1978 and it ran till I closed it in 1991. I diligently backed everything up so I could potentially recover it one day, but as far as I can see, all the DECSystem-10's went to the great scrapyard in the sky, my backups were mostly stolen when my first museum was stolen, and I had huge issues recovering the Essex BCPL compiler to compile what I had left when I finally got a decent TOPS-10 emulator running on a VAX for Bletchley Park.
One good thing about being an unemployable whistleblower is free time, so I finally hunkered down to some 90 hour weeks and built a software replica of the Essex system I think reflects it well. It's running on a KS10 not a KL10 but I had to let some things slip.
I put the latest known versions of MUD and MIST on it, and miraculously found ROCK too.
So, to meander to the point, if you want to see and relive exactly what online multi user gaming was like from 1978 to 1991, you can go to:
Or:
telnet telnet.dec10.uknet.net
(Port 2653 is available for ISPs that block 23)
And then follow the terse instructions from there.
In those days, you were generally faced with a "." prompt and left mostly alone, so for authenticity, I will leave it at that.
I should note that although they were, in their day, wildly popular games with a relatively huge community, this is a museum peice in snapshot-form at the moment. But I will leave them up and running to see what happens and as a useful reference. I wasn't going to, but Richard seemed happy to have MUD running, and former MIST players wanted it back, so...
Pop this a share if you know folks who might be interested.
** Update: New web client that works better.
** Another update - I added a telnet client.
Historically, the telnet connection is much more true to the traditional experience, where you were connecting to a working machine that didn't care about the MUD Guests, so there were no pointers at all. Just rumour and hearsay :)
If any of you Unix/Security people notice I messed up something, please tell me. I left "^], !sh" open on the telnet link for about 2 minutes and nearly had a heart-attack once I spotted it :D
#history #digital #retrogaming #retrocomputing #games #mud #muds #mist #rock #computers #emulation #emulators #vms #tops10 #museum #history #bletchleypark #simh #essex #uk #computinghistory #36bit #engineering #Linux #Security
(don't try this on a phone!)
Edited 236d ago
Post-Quantum Cryptography for the PHP Community https://lobste.rs/s/bqbvpd #cryptography #php #security
https://paragonie.com/blog/2026/04/post-quantum-cryptography-for-php-community
A Linux Kernel 0-day Journey - From a limited UAF to Physical Memory R/W https://lobste.rs/s/h9zpbs #linux #security
https://1day.dev/posts/linux-kernel-0day.html
The typical webapp login process for me is anywhere from 5 to 7 steps, and I'd say I give up about 5-10% of the time after the 2nd CAPTCHA. I can't imagine this is good for anybody, and it almost surely does not reduce abuse either. Just a swirling dark pattern feeding on itself. Everyone likes to ape post-9/11 airport "security" for some reason.
#tech #dev #SecurityTheater #DarkPatterns #UI #UX #security
#tech #dev #SecurityTheater #DarkPatterns #UI #UX #security
Announcing the Ecosystem Security Team at The PHP Foundation ✨
We have a new role at The PHP Foundation, thanks to a grant from Alpha-Omega at the @linuxfoundation and filled by the amazing @edorian! This initiative is designed to improve security across the entire PHP ecosystem and to help maintainers in our community. We are incredibly excited to dig into this work! Learn more about this effort and how you can participate on our blog. 🔒 💪 #php #security
https://thephp.foundation/blog/2026/05/18/announcing-ecosystem-security-team/
Edited 176d ago
You don't want long-lived keys https://lobste.rs/s/o45fm1 #practices #security
https://argemma.com/blog/long-lived-keys/
Open source security at Astral https://lobste.rs/s/qayr1f #security
https://astral.sh/blog/open-source-security-at-astral
Little Snitch for Linux via @eh https://lobste.rs/s/2zrhn4 #linux #release #security
https://obdev.at/blog/little-snitch-for-linux/
Nightmare of the Javascript Optimization https://lobste.rs/s/gbzdnm #browsers #security
https://blog.reg.rip/exploiting-the-ladybird-browser.html#funny-section
Removing the AUICGP instruction via @fanf https://lobste.rs/s/vkngyl #assembly #security
https://cheriot.org/isa/toolchain/2026/03/23/removing-auicgp.html
The Mac App Gold Rush in the Age of Vibe Coding https://lobste.rs/s/8xd0x7 #mac #security #vibecoding
https://caio.ca/blog/ai-vibe-coded-mac-apps.html